ixortalk / ixortalk-gateway Goto Github PK

Gateway should also properly support configurable logout redirect URI.

Authserver functionality: IxorTalk/ixortalk-authserver#33

Upgrade gateway to Spring Boot 2.3 and corresponding Zuul version.

When logging in to the gateway, the session is being used to store the user's JWT token to be passed along to downstream services. This makes CSRF protection necessary for this scenario.

However, when na session cookie is present, eg. when making API calls using a bearer token header, it's safe to disable CSRF protection. Invalid tokens will be rejected anyway and without a session, no valid credentials can be found server-side.

Zuul does not allow us to configure a route to strip the path, which is necessary for UI modules.

Add a custom pre-filter to make sure all requests to index.html (if configured as the url in the route) have their path stripped.

The gateway should act as an OAuth2 authorization server being able to

• Provide OAuth2 access/refresh tokens
• Support third party logins (including our own auth-server)
• Store user profiles

An endpoint is available to POST to in order to refresh the OAuth2 access token that is stored in the user's session.

While still using Spring Boot 1.X, a custom mechanism is required to pass additional request params to the authorization endpoint.

Pass configurable request params from the initial request to the authorize endpoint as well.

URL to go to after login is configurable.

If not specified redirect to the default landing page in the gateway.